访问网络版的解决方案,挖掘和监测所有域名相关事件。
获得网络版企业级解决方案,以搜索和监控域名注册和所有权细节,了解品牌术语、模糊匹配、感兴趣的注册者等。
Independent, evidence-based DNS and abuse intelligence for applicants, advisors, governments, and counsel participating in the ICANN 2026 New gTLD Program.
Predictive threat intelligence is your best first line of defense. Subscribe to the feeds to strengthen your cybersecurity posture. Contact us today for more information.
获取有关互联网资产及其所有权、基础设施和其他属性的综合情报信息。
域名、IP和DNS情报套餐可通过API查询,以可预测的价格进行每年订阅。
可为丰富产品内容和威胁狩猎等需求完整访问WHOIS、IP、DNS和子域名数据库。
Uncover entire attack surfaces with this API to embed asset discovery, vulnerability scanning, and technology metadata into your platform. Now in early access.
Talk to our APIs using LLMs. Connect your preferred LLM to WhoisXML API and simply chat about WHOIS, DNS, threat intelligence, and more.
I’m your Domain Intelligence Assistant. I make it easy to explore WHOIS, DNS, and threat data from WhoisXML API — I’m cloud-based, fast, and always ready to help.
A custom GPT for WHOIS, DNS, IP, and threat intelligence research. Connects ChatGPT directly to WhoisXML API to enable fast, conversational investigations and domain insights.
Discover what you really pay for when buying commercial Internet intelligence data.
Download nowThe Typosquatting API returns data as a JSON array of records. The fields included depend on the endpoint used.
Returns basic group membership information for the queried domain.
[
{
"date": "2022-05-10",
"groupNumber": 1,
"totalNoOfGrpMembers": 13
}
]
Returns all members of a typosquatting group with basic fields.
[
{
"date": "2022-05-10",
"groupNumber": 1,
"groupMemberNumber": 1,
"totalNoOfGrpMembers": 13,
"domain": "example1.com",
"domainUtf": "example1.com"
},
{
"date": "2022-05-10",
"groupNumber": 1,
"groupMemberNumber": 2,
"totalNoOfGrpMembers": 13,
"domain": "example2.net",
"domainUtf": "example2.net"
}
]
The enriched endpoints (checkDomainEnriched, getGroupEnriched) return all basic fields plus the following additional WHOIS and registration data:
[
{
"date": "2022-05-10",
"groupNumber": 1,
"groupMemberNumber": 1,
"totalNoOfGrpMembers": 13,
"domain": "example1.com",
"domainUtf": "example1.com",
"registrantName": "John Doe",
"registrantOrganization": "Example Corp",
"registrantCountry": "US",
"registrantState": "California",
"registrantCity": "Los Angeles",
"registrantEmail": "[email protected]",
"registrarName": "Example Registrar Inc.",
"registrarIANAID": "1234",
"whoisServer": "whois.example-registrar.com",
"nameServers": "ns1.example.com,ns2.example.com",
"status": "clientTransferProhibited",
"createdDate": "2022-05-09",
"updatedDate": "2022-05-09",
"expiresDate": "2023-05-09",
"standardRegCreatedDate": "2022-05-09 12:00:00",
"standardRegUpdatedDate": "2022-05-09 12:00:00",
"standardRegExpiresDate": "2023-05-09 12:00:00",
"ips": "93.184.216.34"
}
]
date |
The detection date of the typosquatting group, in YYYY-MM-DD format. |
groupNumber |
The typosquatting group identifier for the given date. |
groupMemberNumber |
The member's position within the group (not returned by checkDomain). |
totalNoOfGrpMembers |
The total number of domains in the typosquatting group. |
domain |
The domain name in ASCII encoding. |
domainUtf |
The domain name in UTF-8 encoding, useful for internationalized domain names (IDNs). |
registrantName |
The name of the domain registrant from WHOIS data. Enriched endpoints only. |
registrantOrganization |
The organization of the domain registrant. Enriched endpoints only. |
registrantCountry |
The registrant's country. Enriched endpoints only. |
registrantState |
The registrant's state or province. Enriched endpoints only. |
registrantCity |
The registrant's city. Enriched endpoints only. |
registrantEmail |
The registrant's email address. Enriched endpoints only. |
registrarName |
The name of the domain registrar. Enriched endpoints only. |
registrarIANAID |
The IANA ID of the domain registrar. Enriched endpoints only. |
whoisServer |
The WHOIS server for the domain's TLD. Enriched endpoints only. |
nameServers |
The name servers associated with the domain. Enriched endpoints only. |
status |
The domain status codes (e.g., clientTransferProhibited, serverDeleteProhibited). Enriched endpoints only. |
createdDate |
The domain creation date as reported by the registrar. Enriched endpoints only. |
updatedDate |
The domain last-updated date as reported by the registrar. Enriched endpoints only. |
expiresDate |
The domain expiration date as reported by the registrar. Enriched endpoints only. |
standardRegCreatedDate |
The standardized creation date in YYYY-MM-DD HH:MM:SS format. Enriched endpoints only. |
standardRegUpdatedDate |
The standardized last-updated date in YYYY-MM-DD HH:MM:SS format. Enriched endpoints only. |
standardRegExpiresDate |
The standardized expiration date in YYYY-MM-DD HH:MM:SS format. Enriched endpoints only. |
ips |
The IP addresses associated with the domain. Enriched endpoints only. |